Is there a way to have the audit log files be a member of a different
group (other then root)
Currently I am seeing this:
-rw-r----- 1 root root 837716 Aug 3 10:06 audit.log
-r--r----- 1 root root 52428840 Aug 3 08:24 audit.log.1
-r--r----- 1 root root 5242936 Jul 24 10:56 audit.log.2
-r--r----- 1 root ntsecadm 5242911 Jul 23 15:33 audit.log.3
I had originally set the group for /var/log/audit/audit.log to
root:ntsecadm during post install or RH5
After the audit logs rotate the new files take on root:root ownership, I
would like them to also be root:ntsecadm
Can this be set in audit.conf?
Ameel Kamboh
SIP Core Network and Security
Phone: 972.685.4922 (esn 445-4922)
Mobile: 978-590-2280
SIP: akamboh(a)techtrial.com
email: akamboh(a)nortel.com